diff --git a/sudo-1.8.17p1.tar.gz b/sudo-1.8.17p1.tar.gz
deleted file mode 100644
index 5734dc4..0000000
--- a/sudo-1.8.17p1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c690d707fb561b3ecdf6a6de5563bc0b769388eff201c851edbace408bb155cc
-size 2786618
diff --git a/sudo-1.8.17p1.tar.gz.sig b/sudo-1.8.17p1.tar.gz.sig
deleted file mode 100644
index 10ec923..0000000
Binary files a/sudo-1.8.17p1.tar.gz.sig and /dev/null differ
diff --git a/sudo-1.8.18.tar.gz b/sudo-1.8.18.tar.gz
new file mode 100644
index 0000000..2f662f0
--- /dev/null
+++ b/sudo-1.8.18.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:8519e99e97fa51ac50fca2030e76f9aa5195f543ae2d15107753f4e4c4e3be13
+size 2820103
diff --git a/sudo-1.8.18.tar.gz.sig b/sudo-1.8.18.tar.gz.sig
new file mode 100644
index 0000000..f3e48ec
Binary files /dev/null and b/sudo-1.8.18.tar.gz.sig differ
diff --git a/sudo.changes b/sudo.changes
index 76e22fa..8b7ca51 100644
--- a/sudo.changes
+++ b/sudo.changes
@@ -1,3 +1,64 @@
+-------------------------------------------------------------------
+Tue Sep 20 20:13:29 UTC 2016 - michael@stroeder.com
+
+- update to 1.8.18
+ * The sudoers locale is now set before parsing the sudoers file.
+   If sudoers_locale is set in sudoers, it is applied before
+   evaluating other Defaults entries.  Previously, sudoers_locale
+   was used when evaluating sudoers but not during the inital parse.
+   Bug #748.
+ * A missing or otherwise invalid #includedir is now ignored instead
+   of causing a parse error.
+ * During "make install", backup files are only used on HP-UX where
+   it is not possible to unlink a shared object that is in use.
+   This works around a bug in ldconfig on Linux which could create
+   links to the backup shared library file instead of the current
+   one.
+ * Fixed a bug introduced in 1.8.17 where sudoers entries with long
+   commands lines could be truncated, preventing a match.  Bug #752.
+ * The fqdn, runas_default and sudoers_locale Defaults settings are
+   now applied before any other Defaults settings since they can
+   change how other Defaults settings are parsed.
+ * On systems without the O_NOFOLLOW open(2) flag, when the NOFOLLOW
+   flag is set, sudoedit now checks whether the file is a symbolic link
+   before opening it as well as after the open.  Bug #753.
+ * Sudo will now only resolve a user's group IDs to group names
+   when sudoers includes group-based permissions.  Group lookups
+   can be expensive on some systems where the group database is
+   not local.
+ * If the file system holding the sudo log file is full, allow
+   the command to run unless the new ignore_logfile_errors Defaults
+   option is disabled.  Bug #751.
+ * The ignore_audit_errors and ignore_iolog_errors Defaults options
+   have been added to control sudo's behavior when it is unable to
+   write to the audit and I/O logs.
+ * Fixed a bug introduced in 1.8.17 where the SIGPIPE signal handler
+   was not being restored when sudo directly executes the command.
+ * Fixed a bug where "sudo -l command" would indicate that a command
+   was runnable even when denied by sudoers when using the LDAP or
+   SSSD backends.
+ * The match_group_by_gid Defaults option has been added to allow
+   sites where group name resolution is slow and where sudoers only
+   contains a small number of groups to match groups by group ID
+   instead of by group name.
+ * Fixed a bug on Linux where a 32-bit sudo binary could fail with
+   an "unable to allocate memory" error when run on a 64-bit system.
+   Bug #755
+ * When parsing ldap.conf, sudo will now only treat a '#' character
+   as the start of a comment when it is at the beginning of the
+   line.
+ * Fixed a potential crash when auditing is enabled and the audit
+   function fails with an error.  Bug #756
+ * Norwegian Nynorsk translation for sudo from translationproject.org.
+ * Fixed a typo that broke short host name matching when the fqdn
+   flag is enabled in sudoers.  Bug #757
+ * Negated sudoHost attributes are now supported by the LDAP and
+   SSSD backends.
+ * Fixed matching entries in the LDAP and SSSD backends when a
+   RunAsGroup is specified but no RunAsUser is present.
+ * Fixed "sudo -l" output in the LDAP and SSSD backends when a
+   RunAsGroup is specified but no RunAsUser is present.
+
 -------------------------------------------------------------------
 Wed Jun 22 21:02:46 UTC 2016 - michael@stroeder.com
 
diff --git a/sudo.spec b/sudo.spec
index c6cc9bc..727b2aa 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -17,7 +17,7 @@
 
 
 Name:           sudo
-Version:        1.8.17p1
+Version:        1.8.18
 Release:        0
 Summary:        Execute some commands as root
 License:        ISC